Privacy Policy

The School, SnowWind Ski School (operating entity: YUKIKAZE, K.K.; operations manager: Ryokan Ijuin; registered address available on request; privacy contact: [email protected]), handles your personal data in accordance with the Act on the Protection of Personal Information (APPI). This policy covers both our website (www.ykhokkaido.com) and the “雪風 SnowWind” mobile application (Android / iOS, “the App”).

Data we collect

Website

Booking & contact details: name, email, contact info, the course and time slot booked.
Payment details: processed by Stripe; the School does not store your full card number.
Safety & emergency data: emergency contact, and the minimum health information needed for safety.
Coach lesson feedback (voice) — when writing lesson feedback, a coach can record their own spoken notes (up to 5 minutes each). The audio is sent to our server and converted to text (Groq / Whisper, with Cloudflare Workers AI as backup); the School does not store the audio. Coaches can instead use the browser’s built-in speech recognition or type. The transcript and the lesson report DeepSeek writes from it are stored in a non-public Supabase table; the student receives the lesson report. To have a lesson report deleted, email [email protected].

App

Location and ride recordings — after you actively start recording, the App uses precise location and motion sensors to calculate your track, speed and turns on-device and provide replay. Android recording uses a foreground service with an ongoing notification; on iOS, recording can continue while the screen is locked after you grant permission. Stopping a recording stops location collection for that recording. Guest recordings remain on-device. After sign-in, recordings belonging to that account are automatically synced to its private Supabase account space for backup and cross-device access. Private sync does not publish a recording.
Buddies and live location sharing — location is used and transmitted for these features only when you activate buddy, friend live-location or watch-link sharing. Your location is available to your group, the friends you share with, or people holding your shared link. Keep private sharing links confidential. You can stop sharing in the corresponding feature. Supabase processes this location data.
Photos and the activity feed — you can select photos with the system picker. Capture times of selected ride photos are used to place them in your local replay; this does not automatically upload the photos. If you separately choose to publish an activity, its selected photos, caption, display name and any route or statistics you include are shared according to the publishing settings. Other people can view public posts. Feed photos use publicly accessible media URLs, so do not attach private or sensitive photos to feed posts. Photos are used for the features you choose, not for advertising targeting.
Videos — you can select videos with the system picker to add them to that day’s ride timeline. The App reads each video’s recording time and makes a thumbnail on your phone; videos and the tags you add are not uploaded. The App remembers where a selected video is in your gallery so it can play it; if you choose 「保留在 app」 (keep in app), it stores a copy on your phone, which is deleted when you remove the video. The original in your gallery is not affected.
Notifications — when you enable notifications, we associate a device push token and platform with your account to deliver lesson and service notifications through Expo and Apple/Google device notification services. You can disable notifications in device settings. Signing out unregisters that account’s device notification registration.
Microphone / voice — recorded only while you hold the AI assistant’s microphone button. Audio is sent to our server for speech recognition (Cloudflare Workers AI / Whisper); the recognized text is answered by an AI service (DeepSeek). Voice audio is not retained long-term; please avoid speaking sensitive personal data.
Account details — if you choose to sign in: email, display name and avatar via Google Sign-In or email, stored in Supabase.
Learning and reading progress — teaching practice progress can sync to Supabase after sign-in for cross-device use. Journal bookmarks, text size and reading positions are stored on-device.

Age

The App is for users aged 13 and older and is not directed at children under 13. For students under 13, a parent or guardian books on the website and uses the App with the parent’s own account. Lessons for minors still require guardian consent.

Special Care-Required Personal Information (Health, etc.)

Medical history, physical or mental health, medication and similar details may constitute Special Care-Required Personal Information under the APPI. The School collects such information only to the minimum extent necessary for safety management, with your separate, explicit consent; this data is access-restricted, is never used for marketing or ad targeting, and is retained for a shorter period.

Purpose of use

To provide and manage bookings, collect payment, and send confirmations / notifications.
To provide App features: ride recording and replay, location sharing and activity interactions you enable, the AI assistant, snow conditions and pre-trip reports, reading and learning progress, and account data sync.
Customer contact and after-sales service.

Third-party processors

Stripe — credit-card payment processing.
Supabase — member accounts and sign-in, private recording and progress sync, location sharing you enable, activity posts, comments and photos, and lesson reports.
Expo, Apple and Google — delivery of device notifications you allow.
Groq — speech-to-text for coach lesson-feedback recordings.
Resend — transactional email (booking confirmations etc.).
Cloudflare — hosting, security, speech recognition (Workers AI / Whisper), and Turnstile bot verification (invisible mode). Turnstile data handling is governed by the Cloudflare Privacy Policy and its Turnstile Privacy Addendum.
DeepSeek — text generation for AI assistant replies and coach lesson reports (receives only your typed or transcribed text plus necessary conversation context; never your account data or raw location).
Open-Meteo — weather / snow forecast source (requests carry resort coordinates only, never your personal data or own location).
Some providers (such as Stripe, Supabase, Cloudflare, Groq and DeepSeek) may process data outside Japan. Where this constitutes providing personal data to a third party in a foreign country, the School complies with the APPI — where required, providing information about the recipient country’s data-protection system and safeguards, and obtaining your consent.

Cookies

This site may use essential cookies for basic functionality; booking and payment flows are handled by the third parties above on their own domains.

Retention & your rights

You can manage ride recordings in the App and request account and cloud-data deletion through account deletion or our contact address. Uninstalling removes local App data but does not automatically delete previously synced cloud recordings or published content.
The School does not retain data indefinitely; data is deleted or anonymized once the purpose of use has been achieved and there is no legal, accounting, claims, dispute, or safety need to retain it. Health information is retained for a shorter period; incident/dispute records are preserved as required by law.
Under the law, you may request notification of the purpose of use, disclosure, correction, addition, deletion, suspension of use, or suspension of provision to third parties, regarding your personal data (the School may verify your identity to the extent permitted by law). Please email [email protected]; the School will respond within a reasonable period. For the account/data deletion request process, timeline, and retention exceptions, see the Account & Data Deletion page.

Policy Changes

Page updated: November 9, 2026. If this policy changes materially, the effective date will be announced on this website; if a new purpose exceeds the scope of your original consent, the School will obtain your consent separately.